Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: RQLzUqvKQGYhVuejaP29Sn97CshV9FQZJq+2mmh0XKU=
Subject key identifier: 7C:70:71:34:FC:FB:E4:B0:00:8A:48:41:B8:81:E2:94:A8:3A:F3:FD
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 0196A9F9C8AE03616AFC06DBE5C9684EB814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0919
Signing time: Wed 07 May 2025 09:00:41 +0000
Manifest this update: Wed 07 May 2025 09:00:41 +0000
Manifest next update: Thu 08 May 2025 09:00:41 +0000
Files and hashes: 1: E6bot_tKJqCzADpBxFeKtsutgCs.roa (hash: IzVVajCV/IB0bxI8d5Bqo7CZjFjDagAuPrwaJPvu9o8=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: LzD6sXhXIMzXXsvcGCihG/Q01OfiIk3z+cHKEBPT230=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:c8:ae:03:61:6a:fc:06:db:e5:c9:68:4e:b8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: May 7 09:00:41 2025 GMT
Not After : May 8 09:00:41 2025 GMT
Subject: CN=7c707134fcfbe4b0008a4841b881e294a83af3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:72:b6:90:fa:f8:da:02:e0:bc:e6:07:3d:
19:79:67:93:5d:7a:80:72:74:fb:46:3f:8b:24:ca:
6a:ea:ef:4f:a0:dd:3f:9d:42:41:c5:70:a0:08:f0:
f6:42:2d:6c:1b:bf:3c:07:15:8b:a6:d2:50:eb:dd:
89:06:cd:12:b9:5b:69:da:1b:4d:a9:bd:d2:19:79:
03:22:73:43:d6:ec:39:71:40:83:df:93:e2:e2:f8:
b9:4f:77:41:49:fb:41:79:76:19:a9:ae:8c:f0:41:
e4:6e:28:fd:b2:5d:82:53:e7:e0:65:2b:2b:ce:8b:
60:d4:f7:0e:ec:f4:ef:3f:32:59:bb:ee:8a:fd:63:
1c:cb:6d:72:1d:b6:c8:26:07:9f:cc:b6:11:54:e9:
79:4e:30:bf:96:de:5c:8f:79:b9:a5:0a:9c:be:c5:
4e:ad:fb:59:98:42:2a:28:1b:ff:68:ae:64:73:c2:
3b:6d:ab:a6:8a:48:0e:9e:e2:81:7d:62:37:2a:ec:
e3:aa:4a:d7:f8:fb:63:6b:4d:b2:8e:b6:66:6f:50:
b6:20:ed:6d:e0:c5:32:11:73:52:bb:e8:bb:8a:44:
61:3a:d6:9f:7d:ff:92:26:30:5c:af:d6:f6:89:29:
14:70:8d:f5:91:56:b6:45:ca:42:aa:cf:91:1b:49:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:71:34:FC:FB:E4:B0:00:8A:48:41:B8:81:E2:94:A8:3A:F3:FD
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8c:10:fa:4b:40:c8:0a:82:2d:e5:a8:95:35:13:7c:07:56:
21:b1:06:8b:7c:1b:a0:08:97:76:23:a2:42:c6:2b:61:e5:4a:
ff:17:3c:08:c8:b4:8a:00:19:ee:9a:7d:49:54:06:b9:42:3c:
fd:1f:cb:28:53:38:2a:b2:fe:23:a8:83:0c:91:16:53:05:4b:
52:69:dd:1b:e0:0d:16:70:45:a7:f0:08:35:00:56:8b:69:cc:
21:77:57:2a:bf:e7:8a:dc:b0:8a:14:6a:18:5c:58:bc:91:dc:
6d:b0:db:0f:7d:ab:13:31:4f:21:ab:4e:c5:48:45:9a:2e:a6:
03:c2:b8:55:6b:b6:b9:19:3a:17:10:10:82:10:5a:57:ef:68:
77:d6:f5:64:2c:00:55:2a:9a:66:97:bd:15:18:99:0c:88:a8:
4a:87:bb:e7:01:4b:3a:6d:54:4a:3f:e8:41:dc:99:38:76:be:
f5:b7:59:eb:c5:38:75:5d:9c:71:f3:9d:e3:e4:bb:15:5b:d3:
63:5d:c1:d1:a6:77:a2:a2:4b:39:e5:9e:db:27:37:e8:66:77:
ca:40:5e:6a:ea:88:13:c6:73:25:14:74:fb:9f:05:79:1c:f3:
2a:f8:f0:a1:6d:3e:4f:85:c5:d9:69:5e:fb:18:b6:c6:88:78:
33:13:47:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:03:04 2025 by rpki-client